System Configuration - SSL and SSH - SSL - Server Certs - Assign to Components

Assign an SSL certificate to the MOVEitDMZ Web Site

To perform these procedures please have your SSL certificate(s) imported already.

Click Start -> Programs -> Administrative Tools -> Internet Information Services Manager (IIS Manager). Select the web site you wish to work with and Right-Click then select Properties. Click on the Directory Security tab then click Server Certificate.... This will start the Web Server Certificate Wizard.

Select Assign an existing certificate and click Next.

ssl22.png (10716 bytes)

Select the correct certificate and click Next.

ssl23.png (9296 bytes)

Select port (almost always 443) to use click Next.

ssl24.png (7389 bytes)

Verify the certificate summary and click Next.

ssl25.png (10398 bytes)

The certificate has now been assigned to the Web site, click Finish.

ssl26.png (14561 bytes)


Assign an SSL certificate to the MOVEit DMZ FTP Server

Remember to assign certificates to the FTP server when upgrading SSL certificates. This will cause FTP over SSL clients to fail if certificates are not updated.

Click Start -> Programs -> MOVEit DMZ -> MOVEit DMZ Config.

ssl40.png (10173 bytes)

Select the FTP Certs tab and click the [...] box next to Default Certificate. This will open the Certificate Manager.

Click on My Personal under Current User or Local Machine (depending how the certificate was imported) and Double-Click the certificate that was used for MOVEit DMZ Web Site.

ssl42.png (3831 bytes)

The Certificate selected should be selected and you can click Ok. The MOVEit DMZ FTP Server needs to be restarted for this to take effect.

ssl41.png (10536 bytes)

To restart the MOVEit DMZ Service open a command prompt and type net stop moveitdmzftp. After the service has successfully stopped, type net start moveitdmzftp. The SSL certificate should now take effect in the MOVEit DMZ FTP server.

Replicate SSL server certificates across MOVEit DMZ nodes

If you are using Resiliency services on MOVEit DMZ, you can use the "Send Certs" button to copy SSL server certificates to all other MOVEit DMZ Resiliency nodes. If you also perform a "Send Registry" action on the Primary node, you will not have to reassign the MOVEit DMZ FTP certificate on any other node, but you will have to manually restart the MOVEit DMZ FTP service on each node before the change will take effect. You will also have to manually use the IIS Manager to change the SSL server certificate used by each node's IIS web server before those service can use the new SSL server certificate too.